Add sandbox support for Windows process mitigations

sandbox/win/src/sandbox_policy_base.h

Index: sandbox/win/src/sandbox_policy_base.h
===================================================================
--- sandbox/win/src/sandbox_policy_base.h	(revision 154997)
+++ sandbox/win/src/sandbox_policy_base.h	(working copy)
@@ -52,6 +52,10 @@
       IntegrityLevel integrity_level) OVERRIDE;
   virtual ResultCode SetAppContainer(const wchar_t* sid) OVERRIDE;
   virtual ResultCode SetCapability(const wchar_t* sid) OVERRIDE;
+  virtual ResultCode SetProcessMitigations(uint64 flags) OVERRIDE;
+  virtual uint64 GetProcessMitigations() OVERRIDE;
+  virtual ResultCode SetDelayedProcessMitigations(uint64 flags) OVERRIDE;
+  virtual uint64 GetDelayedProcessMitigations() OVERRIDE;
   virtual void SetStrictInterceptions() OVERRIDE;
   virtual ResultCode AddRule(SubSystem subsystem, Semantics semantics,
                              const wchar_t* pattern) OVERRIDE;
@@ -120,6 +124,8 @@
   bool relaxed_interceptions_;
   IntegrityLevel integrity_level_;
   IntegrityLevel delayed_integrity_level_;
+  uint64 mitigations_;
+  uint64 delayed_mitigations_;
   // The array of objects that will answer IPC calls.
   Dispatcher* ipc_targets_[IPC_LAST_TAG];
   // Object in charge of generating the low level policy.